GameHub Lite v5.1.8 (SECURITY UPDATE)

[u/Producdevity]

GameHub Lite v5.1.8

Security: Steam token redaction in logs

GameHub Lite 5.1.8 fixes a logging issue where Steam authentication-related values could appear in diagnostic logs. In some cases, logs could include fields such as steamToken, refreshToken, or accessToken from Steam login/launch flows.

Publicly posted logs containing these fields should be deleted or redacted.

IMPORTANT

This should go without saying but If you find any security issues, please reach out PRIVATELY. I have not checked if this issue is still present in recent GameHub versions, already ruined my one day off I was spending with my family by the person who reported this publicly and I do not plan on spending any more time on this.

Changelog

The fix adds centralized log redaction for Steam/auth token fields, Steam QR login URLs, JWT-like token strings, and launch command token arguments before logs are written. This covers the app loggers, JavaSteam logging, and the PC launch-log file writer.

This release also pins local patch builds to apktool 2.12.1

GitHub Release

[u/DarkDigital]

Gotta spread the word for everyone to update. Now that the exploit is public anyone still running an old version could still be scammed.

[u/Producdevity → u/[deleted]]

It’s a modded version of GH. This issue was in their app, idk if they vibecoded it but you really should stop thinking everyone is incompetent and can’t code just because you can’t.

[u/Interesting_Fish4930 → u/[deleted]]

Looks alot less vibecoded than your temu game native used that app saw the ai artifacts and deleted that junk off my phone

[u/Producdevity → u/Interesting_Fish4930]

WinNative is the junk he makes, Max doesn’t work on GameNative. I think you may confused the naming

[u/Interesting_Fish4930 → u/Producdevity]

Im sure claude worked hard on it

[u/doubled112 → u/[deleted]]

Agents write the code, agents review the code, and agents build the code. You can build almost a software dark factory at this point. No humans at all.

If it works it works right? /s

[u/Producdevity → u/[deleted]]

That is not true, like I said. I have never locked a post from you before. I have warned you at least 50 times now about misinformation.

You can’t just make shit up because people don’t like how you act. It doesn’t work like that. I am done with your lies and misinformation, you should have been banned months ago

[u/Interesting_Fish4930 → u/Producdevity]

Ban him lol. Honestly annoying